Python script to authenticate with MFA to Azure and recover the user's email.

Azure_MFA_and_recover_email.py

import requests
from azure.identity import InteractiveBrowserCredential

# Define your Azure AD client ID
client_id = ...

# Define the Microsoft Graph API scope
scope = ["User.Read"]

# Create the InteractiveBrowserCredential instance
credential = InteractiveBrowserCredential(client_id=client_id)

# Acquire a token
token = credential.get_token(*scope)

# Use the access token to call the Microsoft Graph API
access_token = token.token
headers = {
    'Authorization': f'Bearer {access_token}',
    'Content-Type': 'application/json'
}

# Fetch user profile information
graph_url = "https://graph.microsoft.com/v1.0/me"
response = requests.get(graph_url, headers=headers)

if response.status_code == 200:
    user_info = response.json()
    email = user_info.get('mail') or user_info.get('userPrincipalName')
    print(f"User email: {email}")
else:
    print(f"Failed to retrieve user information: {response.status_code}")
    print(response.json())